---
typeId: req
recordId: benac-auth-004
fields:
  title: Host-specific authentication methods
  statement: Benac shall define the semantics required for local user
    authentication while allowing each Host Implementation to use
    platform-appropriate mechanisms, such as passphrases, passkeys,
    biometric-mediated host flows, OS keychain unlock, browser-supported
    credential flows, or equivalent local mechanisms.
  rationale: Mobile browser, desktop browser, Ubuntu, macOS, and Windows cannot be
    forced into one identical authentication implementation, but they can share
    semantics.
  verification: Review authentication profile support and conformance traces showing that each Station records authentication context for local authority-bearing actions. Traces shall record method class, issuer principal, scope, creation time, expiry, approval binding, and any host/platform evidence actually available to that implementation. Conformance verifies shared authentication semantics, not identical platform mechanisms.
  testable: true
  status: draft
  area: BENAC-AUTH
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.2 Authentication and authority boundaries
  order: 19
---
